Privacy Policy

1. Information We Do NOT Collect

Unlike traditional cloud dictation tools (such as Siri, Google Voice Typing, or cloud-based AI tools), NeverType operates with an offline-first architecture:

• Audio recordings: Audio from your microphone is streamed directly to your local computer RAM and cleared immediately after transcription. It is never uploaded to the internet.
• Transcribed text: The words you speak and the text pasted into your applications remain strictly on your local machine. We cannot see, read, or access what you dictate.
• Keystrokes & clipboard history: NeverType only accesses the pasteboard at the exact instant you finish dictation to paste your transcript into your active window.

2. Information We Do Collect (Website & Account)

To maintain your account, issue software licenses, and process payments, we collect minimal operational information through our web platform:

• Account Information: When you sign in via Google OAuth or Email OTP, we store your email address, display name, and avatar URL in our secure database.
• Billing Information: Payments are processed by our merchant-of-record partner, Dodo Payments. We do not store or process your credit card numbers, CVVs, or bank account credentials. Dodo Payments handles all PCI-DSS compliant transactions and provides us with subscription status tokens and transaction IDs.
• License & Device Activations: When you activate NeverType on a desktop device, the app transmits an anonymous, one-way cryptographic hash of your hardware (Machine ID) and OS platform to verify that you are within your 3-device license allowance.
• Website Analytics: On our marketing website (nevertype.pro), we use privacy-compliant Google Analytics 4 and iubenda Cookie Solution to analyze aggregate page visits, referral sources, and button clicks. You can opt out or reject cookies at any time via the consent banner.

3. How We Use Your Information

We use the limited account data collected solely for:

• Generating and managing your NeverType Pro or Lifetime license keys.
• Allowing you to deactivate unused devices from your account dashboard.
• Sending transactional receipts, sign-in verification codes, and critical security announcements via Resend.
• Preventing unauthorized sharing and fraudulent abuse of license keys.

4. Third-Party Service Providers

We partner with trusted third-party infrastructure providers that comply with strict data protection standards:

• Supabase: Encrypted PostgreSQL database hosted in AWS for storing user records and license metadata.
• Firebase Authentication: Secure Google OAuth identity provider.
• Dodo Payments: Global merchant of record handling payment processing, billing, and invoices.
• Resend: Transactional email service for sending OTP sign-in codes.
• Vercel: Web hosting and serverless API execution for nevertype.pro.

5. Data Retention & Deletion (GDPR & CCPA Rights)

You maintain full control over your personal information. Under global privacy regulations including GDPR (European Economic Area) and CCPA (California):

• Right to Access: You can view all active devices and license keys inside your Dashboard at any time.
• Right to Deletion: You may request complete erasure of your account, email address, and associated database records by emailing us at support@nevertype.pro. Your data will be deleted within 30 business days.
• Right to Export: You can request a machine-readable export of your license records.

6. Security Safeguards

All traffic between your browser and our servers is encrypted using Transport Layer Security (TLS 1.3). Database connections are secured via SSL certificates and access is restricted through role-based IAM policies.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect improvements to our app or changes in legal requirements. Any modifications will be posted directly to this page with an updated "Last Updated" date.